= form_for @application_setting, url: general_admin_application_settings_path(anchor: 'js-signin-settings'), html: { class: 'fieldset-form', id: 'signin-settings' } do |f|
  = form_errors(@application_setting)

  %fieldset
    .form-group
      .form-check
        = f.check_box :password_authentication_enabled_for_web, class: 'form-check-input'
        = f.label :password_authentication_enabled_for_web, class: 'form-check-label' do
          = _('Allow password authentication for the web interface')
          .form-text.text-muted
            = _('When inactive, an external authentication provider must be used.')
    .form-group
      .form-check
        = f.check_box :password_authentication_enabled_for_git, class: 'form-check-input'
        = f.label :password_authentication_enabled_for_git, class: 'form-check-label' do
          = _('Allow password authentication for Git over HTTP(S)')
          .form-text.text-muted
            When inactive, a Personal Access Token
            - if Gitlab::Auth::Ldap::Config.enabled?
              or LDAP password
            must be used to authenticate.
    - if omniauth_enabled? && button_based_providers.any?
      %fieldset.form-group
        %legend.gl-font-base.gl-mb-3.gl-border-none.gl-font-weight-bold= _('Enabled OAuth authentication sources')
        = hidden_field_tag 'application_setting[enabled_oauth_sign_in_sources][]'
        - oauth_providers_checkboxes.each do |source|
          = source
    .form-group
      = f.label :two_factor_authentication, _('Two-factor authentication'), class: 'label-bold'
      .form-check
        = f.check_box :require_two_factor_authentication, class: 'form-check-input'
        = f.label :require_two_factor_authentication, class: 'form-check-label' do
          = _('Enforce two-factor authentication')
          %p.form-text.text-muted
            = _('Enforce two-factor authentication for all user sign-ins.')
            = link_to _('Learn more.'), help_page_path('security/two_factor_authentication.md'), target: '_blank', rel: 'noopener noreferrer'
    .form-group
      = f.label :two_factor_authentication, _('Two-factor grace period'), class: 'label-bold'
      = f.number_field :two_factor_grace_period, min: 0, class: 'form-control gl-form-input', placeholder: '0'
      .form-text.text-muted
        = _('Maximum time that users are allowed to skip the setup of two-factor authentication (in hours). Set to 0 (zero) to enforce at next sign in.')
    .form-group
      = f.label :admin_mode, _('Admin Mode'), class: 'label-bold'
      = sprite_icon('lock', css_class: 'gl-icon')
      .form-check
        = f.check_box :admin_mode, class: 'form-check-input'
        = f.label :admin_mode, class: 'form-check-label' do
          = _('Enable admin mode')
          %p.form-text.text-muted
            = _('Require additional authentication for administrative tasks.')
            = link_to _('Learn more.'), help_page_path('user/admin_area/settings/sign_in_restrictions', anchor: 'admin-mode'), target: '_blank', rel: 'noopener noreferrer'
    .form-group
      = f.label :unknown_sign_in, _('Email notification for unknown sign-ins'), class: 'label-bold'
      .form-check
        = f.check_box :notify_on_unknown_sign_in, class: 'form-check-input'
        = f.label :notify_on_unknown_sign_in, class: 'form-check-label' do
          = _('Enable email notification')
          %p.form-text.text-muted
            = _('Notify users by email when sign-in location is not recognized.')
            = link_to _('Learn more.'), help_page_path('user/profile/unknown_sign_in_notification.md'), target: '_blank', rel: 'noopener noreferrer'
    .form-group
      = f.label :home_page_url, _('Home page URL'), class: 'label-bold'
      = f.text_field :home_page_url, class: 'form-control gl-form-input', placeholder: 'http://company.example.com', :'aria-describedby' => 'home_help_block'
      %span.form-text.text-muted#home_help_block= _("Direct non-authenticated users to this page.")
    .form-group
      = f.label :after_sign_out_path, _('Sign-out page URL'), class: 'label-bold'
      = f.text_field :after_sign_out_path, class: 'form-control gl-form-input', placeholder: 'http://company.example.com', :'aria-describedby' => 'after_sign_out_path_help_block'
      %span.form-text.text-muted#home_help_block= _("Direct users to this page after they sign out.")
    .form-group
      = f.label :sign_in_text, _('Sign-in text'), class: 'label-bold'
      = f.text_area :sign_in_text, class: 'form-control gl-form-input', rows: 4
      %span.form-text.text-muted#home_help_block= _("Add text to the sign-in page. Markdown enabled.")
  = f.submit _('Save changes'), class: "gl-button btn btn-confirm"